Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: 5L5Ojj3zDaFdkLwfQa/KYr4odxGXLY2salYOLTcxPu8=
Subject key identifier: 45:9F:C8:7F:45:B0:98:22:B1:5A:4C:70:C4:DE:16:00:72:8F:6F:1F
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019DCF0738F330F4B3E68301E42687D72AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 03E4
Signing time: Mon 27 Apr 2026 13:00:50 +0000
Manifest this update: Mon 27 Apr 2026 13:00:50 +0000
Manifest next update: Tue 28 Apr 2026 13:00:50 +0000
Files and hashes: 1: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (hash: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=)
2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: kCXcbuHgfg7LLmi+S5iwCGZiq3vc2yJh+k1U7ziwNc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:38:f3:30:f4:b3:e6:83:01:e4:26:87:d7:2a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Apr 27 13:00:50 2026 GMT
Not After : Apr 28 13:00:50 2026 GMT
Subject: CN=459fc87f45b09822b15a4c70c4de1600728f6f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:b9:77:03:aa:65:50:0e:e1:c2:1a:fb:c7:
94:af:3a:24:80:15:b6:59:a5:8e:dc:d3:47:c6:e9:
8a:52:8a:15:2d:99:b4:56:7e:35:5e:2f:d2:58:12:
f6:b2:69:d4:fe:b3:07:2c:c4:3f:d2:18:c9:ba:56:
1a:70:fd:25:c0:33:03:7f:f2:95:71:b0:6c:7e:a9:
67:73:69:7c:e9:60:41:f3:f9:0f:5c:eb:98:c6:12:
ec:c2:16:cc:f8:48:28:a2:73:ea:e2:9a:49:a0:c7:
3e:36:a1:9e:48:3d:98:d0:30:53:a9:62:2e:af:03:
8a:c8:2c:92:d0:60:b0:22:38:ce:fb:f6:c7:3b:47:
d0:49:ba:75:4a:f9:13:e9:4b:51:f5:71:85:4a:f6:
62:66:87:04:df:10:d5:50:d0:18:c8:bb:93:c4:6b:
9a:d5:a8:8e:9c:95:57:20:af:2c:a1:01:b9:b0:e6:
be:3e:d5:5f:9f:0e:93:60:84:90:c8:b2:ef:18:e1:
ad:0c:a6:d5:a4:5d:4b:78:30:be:b3:0f:f3:d4:64:
65:4d:c9:99:0b:e0:51:6a:2a:dd:2f:67:d0:3a:bd:
d8:4a:e8:27:96:39:bd:c3:1f:c9:aa:ce:5b:0d:0b:
fa:b3:93:d2:96:c5:e8:3b:78:37:e9:d1:4f:f6:e3:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:C8:7F:45:B0:98:22:B1:5A:4C:70:C4:DE:16:00:72:8F:6F:1F
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:dc:dd:07:65:bd:e6:00:f3:68:ff:43:5b:8f:67:6a:7f:
6f:a6:f5:53:c9:42:4f:fe:27:90:a9:f2:20:54:f9:81:a4:58:
5e:40:6d:e2:e2:95:0d:b7:bd:77:88:e0:90:ab:af:cf:74:2b:
61:15:78:62:cb:f8:85:d4:2a:12:b3:3a:91:90:2b:2e:1f:c3:
75:61:5d:1c:c6:ec:2f:3d:79:a1:23:7c:ec:32:a2:8a:04:93:
17:62:e8:cc:0a:3e:f8:b6:db:f1:ca:99:e8:34:3f:e3:11:52:
12:e3:4d:be:00:d1:99:ed:67:48:de:7d:71:0f:a6:52:cb:14:
df:22:3c:21:60:45:6f:4d:ae:fb:c7:16:a0:64:6c:c2:81:85:
23:07:78:13:ec:5d:62:88:16:9e:c6:3e:f3:c1:2f:63:02:19:
08:ea:3e:e9:56:37:2d:8f:6e:56:e8:8e:84:ff:93:75:ed:7c:
78:f8:ff:cf:84:3b:37:1e:73:11:b2:28:ab:61:74:e5:64:2e:
94:4d:0e:2c:07:51:3f:a4:cf:fc:8c:b6:fb:7d:7a:97:7a:81:
b3:c2:2e:50:72:b9:f7:48:1b:85:f4:d2:68:ea:83:3b:60:fe:
4d:d0:27:05:fe:17:4d:03:c6:35:ae:e4:63:f0:75:8f:6b:3b:
27:32:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:52 2026 by rpki-client